Skip to content

YesWeHack bug bounty programs

Web and apps EU Updated

YesWeHack is a web and app bug bounty platform (EU) with 53 public programs; 51 (96%) pay cash, with a median top reward of €3,000 and a highest of €230k.

Public programs
53
Pay cash (96%)
51
Median top reward
€3,000
Highest reward
€230k
No cash (VDP)
2
First response
1 d
Reward changes, 90 d
+0 / −4

Is YesWeHack a good place to start?

What matters most when you are new: rewards for small bugs, open access and quick answers.

  • 51 programs list a cash reward for Low-severity bugs.
  • Every program can be read without an account.
  • 52 are known to answer within 3 days.

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

  • Triage speed

    Median first response is 1 day.

    Based on 53 programs Answer within 3 days
  • Reward changes

    0 reward raises and 4 cuts in the last 90 days.

    Based on 53 programs
  • Low-severity bugs

    51 programs list a cash reward for Low.

    Based on 51 programs Pays for Low
  • Identity checks (KYC)

    1 require KYC before paying, 0 say they don't; the rest don't say.

    Based on 1 program No KYC
  • Fees and deposits

    51 programs charge a fee, deposit or credits per report.

    Based on 53 programs No fee
  • How you are paid

    51 pay in fiat money and 0 in crypto.

    Based on 51 programs
  • Safe harbor

    5 state full safe harbor and 11 partial.

    Based on 16 programs Full safe harbor

Highest-paying programs

See all

Rewards by severity

Maximum reward per severity, from EUR reward tables.

Severity Programs Median Top
Critical 51 €3,500 €230k
High 51 €1,500 €70k
Medium 51 €500 €50k
Low 51 €100 €40k

All 53 programs on YesWeHack

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

53 programs · Highest reward